Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e34332e36392e302f32342d3234203d3e203630303638.roa
File: 3139332e34332e36392e302f32342d3234203d3e203630303638.roa (raw, json)
Hash identifier: +zaMQfqJosxc1O0xbxcZomzRerMZB1Jm5EyR+wo44O4=
Subject key identifier: 33:1B:00:59:D0:41:94:E0:A2:37:7D:CE:A3:15:54:2C:63:C8:D6:06
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 2BB7DBD6FE885F46A138B5AED6B980E1E360D5FA
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e34332e36392e302f32342d3234203d3e203630303638.roa
Signing time: Mon 01 May 2023 13:18:31 +0000
ROA not before: Mon 01 May 2023 13:13:31 +0000
ROA not after: Mon 29 Apr 2024 13:18:31 +0000
asID: 60068
IP address blocks: 193.43.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:b7:db:d6:fe:88:5f:46:a1:38:b5:ae:d6:b9:80:e1:e3:60:d5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: May 1 13:13:31 2023 GMT
Not After : Apr 29 13:18:31 2024 GMT
Subject: CN=331B0059D04194E0A2377DCEA315542C63C8D606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e3:2b:41:5c:11:a3:ed:82:cb:4d:d4:4b:8f:
d6:c6:3c:81:6e:a5:1f:24:ab:21:3f:51:bf:e4:c1:
fe:b0:f2:ba:3b:b0:42:f8:bf:4f:21:92:2b:d1:a8:
84:8a:47:3d:6b:49:56:be:26:a8:b9:e4:75:b5:6a:
22:ce:96:28:af:24:6c:9c:5f:35:a8:11:76:f0:fc:
1a:86:e5:82:bb:de:4c:65:03:d7:03:3e:14:d4:78:
4b:ee:52:6c:88:56:e5:bd:90:95:13:f0:56:8a:1f:
ae:54:1a:82:36:a0:e5:11:83:c3:41:92:90:b2:3e:
d4:06:9f:d6:0d:39:07:5f:e0:87:44:c3:74:7d:d9:
bb:30:92:5d:ab:94:80:34:c9:8b:92:85:fc:27:3f:
32:9e:09:3c:96:21:a5:ce:c2:28:d2:b6:69:c9:c8:
60:04:07:c5:2a:ed:5e:1a:27:c8:ac:e6:8d:86:1a:
c2:b3:e8:ab:84:aa:e3:f5:0a:64:71:90:d0:c1:ee:
27:62:58:f6:57:d5:5a:a6:17:42:b0:16:e3:e4:86:
37:20:29:05:40:0d:45:2e:97:e5:b2:a6:29:bd:70:
76:55:27:74:1e:d8:b2:00:e0:e9:9a:fa:b3:83:df:
64:af:3d:9d:e5:d9:3c:d5:a8:67:23:5f:fd:2d:e2:
b9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1B:00:59:D0:41:94:E0:A2:37:7D:CE:A3:15:54:2C:63:C8:D6:06
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e34332e36392e302f32342d3234203d3e203630303638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.69.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:f0:b7:12:7e:2e:c8:48:1f:5e:52:b3:b3:29:6c:c5:e9:2c:
fe:4f:df:2d:37:99:a9:c0:04:ab:f8:bd:95:2c:48:82:6a:cf:
7e:cf:66:a3:a7:8e:7e:98:bc:f0:c9:f9:78:04:5b:99:17:6f:
fd:ba:9b:58:c4:ad:57:b5:ee:26:2c:1e:41:ac:84:ca:af:29:
c3:e5:75:89:c7:ff:46:2e:65:26:6e:83:d3:7e:bd:e7:79:1f:
f9:31:5a:cc:13:d3:90:f2:46:79:65:bf:cb:9e:e9:8e:02:a7:
77:67:dc:9d:fc:9c:05:f1:ad:78:a4:52:0e:d3:b0:b7:31:66:
00:eb:61:2b:61:6b:de:99:10:2f:b2:97:7c:7d:86:6f:80:0a:
d8:b4:d1:67:26:0c:3f:02:db:3d:61:49:22:14:45:bf:42:40:
c6:be:f3:16:a3:64:92:36:07:ed:74:32:20:f4:5e:38:a8:60:
2b:9c:16:15:55:b9:5c:ee:ca:20:ee:d1:ff:01:97:21:27:c3:
18:eb:2c:74:91:a6:35:6d:61:de:37:8d:aa:3d:c7:72:82:54:
06:a4:11:c7:78:ae:09:e8:66:36:08:fe:f4:30:34:9a:a0:67:
99:0e:a4:fc:55:9e:67:37:bd:6b:e2:72:59:ce:43:63:90:53:
1f:c5:19:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:56:29 2025 by rpki-client